EUVD-2023-58531

Malicious code in bioql PyPI...

EUVD-2023-26470

Malicious code in bioql PyPI...

EUVD-2023-26452

Malicious code in bioql PyPI...

EUVD-2022-49120

Malicious code in bioql PyPI...

EUVD-2023-12363

Malicious code in bioql PyPI...

EUVD-2023-26481

Malicious code in bioql PyPI...

EUVD-2022-49618

Malicious code in bioql PyPI...

EUVD-2023-33548

Malicious code in bioql PyPI...

EUVD-2022-52144

Malicious code in bioql PyPI...

EUVD-2023-26458

Malicious code in bioql PyPI...

EUVD-2022-51021

Malicious code in bioql PyPI...

EUVD-2023-26472

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2022-46836

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PHP code injection in watolib auth.php and hosttags.php in Tribe29's Checkmk = 2.1.0p10, Checkmk = 2.0.0p27, and Checkmk = 1.6.0p29 allows an attacker to inject...

Linux Distros Unpatched Vulnerability : CVE-2023-6287

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sensitive data exposure in Webconf in Tribe29 Checkmk Appliance before 1.6.8 allows local attacker to retrieve passwords via reading log files. CVE-2023-6287 No...

Linux Distros Unpatched Vulnerability : CVE-2023-22309

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Reflective Cross-Site-Scripting in Webconf in Tribe29 Checkmk Appliance before 1.6.4. CVE-2023-22309 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2023-22307

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sensitive data exposure in Webconf in Tribe29 Checkmk Appliance before 1.6.4 allows local attacker to retrieve passwords via reading log files. CVE-2023-22307...

CVE-2023-22288

HTML Email Injection in Tribe29 Checkmk =2.1.0p23; =2.0.0p34, and all versions of Checkmk 1.6.0 allows an authenticated attacker to inject malicious HTML into Emails...

CVE-2023-22294

Privilege escalation in Tribe29 Checkmk Appliance before 1.6.4 allows authenticated site users to escalate privileges via incorrectly set permissions...

CVE-2022-47909

Livestatus Query Language LQL injection in the AuthUser HTTP query header of Tribe29's Checkmk = 2.1.0p11, Checkmk = 2.0.0p28, and all versions of Checkmk 1.6.0 EOL allows an attacker to perform direct queries to the application's core from localhost...

CVE-2022-4884

Path-Traversal in MKP storing in Tribe29 Checkmk =2.0.0p32 and = 2.1.0p18 allows an administrator to write mkp files to arbitrary locations via a malicious mkp file...